PT-2022-18035 · Apple · Apple Macos

David Hoyt · Published 2022-10-24 · Updated 2023-08-08 · CVE-2022-26730

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS versions prior to Ventura 13

Description A memory corruption issue existed in the processing of ICC profiles, which was addressed with improved input validation. Processing a maliciously crafted image may lead to arbitrary code execution.

Recommendations For versions prior to macOS Ventura 13, update to macOS Ventura 13 to resolve the issue.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2022-26730

Affected Products

Apple Macos

References · 7

• https://support.apple.com/en-us/HT213488 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-26730 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26730 · Vendor Advisory
• https://t.me/pentestingnews/29877 · Telegram Post
• https://support.apple.com/en-us/102853 · Note
• https://t.me/pentestingnews/29926 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-26730 · Note